205
Nginx core developer quits project in security dispute, starts “freenginx” fork (arstechnica.com)
submitted 2 years ago by to c/technology@lemmy.world
17 comments fedilink hide all child comments
 
  • A core developer of Nginx, the popular web server, has quit the project and started a fork called freenginx.
  • The developer cited disagreements with the new management at F5, which acquired Nginx Inc. in 2019, over security policies.
  • The dispute arose from the assigning of Common Vulnerabilities and Exposures (CVEs) to bugs in the experimental HTTP/3 code.

Archive link: https://archive.ph/U4XRN

you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 2 years ago

Thanks for that.

Its a weird that the couldn't just choose to back port the fixes that have security implications even if it wouldn't deserve a cve.

  • permalink
  • fedilink
  • source
  • parent